$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: mI/2u/3X900gxnxlvo3BvMkK2QtP1TwuH/nflIPNXWY= Subject key identifier: 0C:C8:95:4B:D0:6A:1D:AA:00:49:6B:C5:F1:91:6D:56:16:D3:66:21 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 02D0 Signing time: Sun 19 Oct 2025 03:29:21 +0000 Manifest this update: Sun 19 Oct 2025 03:29:21 +0000 Manifest next update: Sun 26 Oct 2025 03:29:21 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: liLIcq15FORVYrHsBx+lqDKtTKiKb3IJBzyQLMBJDyQ=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: Oct 19 03:29:21 2025 GMT Not After : Oct 26 03:29:21 2025 GMT Subject: CN=68f45b11-fc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:eb:e0:12:36:6a:91:27:9e:c5:d2:ce:72: cc:a7:7f:90:81:f7:56:07:82:f6:2a:aa:69:2f:d3: 96:45:5b:69:3d:97:8d:2e:ea:fb:5c:fb:a2:6d:f1: 64:71:fc:5b:61:60:9e:c2:53:8a:ac:d9:78:4b:4f: 13:72:21:8c:41:a1:cf:68:1e:4c:cb:a9:34:41:20: 1f:c8:93:8e:6f:0f:f1:95:0c:28:0b:52:95:94:ff: 84:90:44:74:da:bf:6b:8c:b5:ab:73:ac:7f:67:ab: c2:df:3b:6a:4b:a3:66:3e:62:59:2a:39:0f:9e:cf: c7:7b:d8:72:b7:51:98:3a:a3:c9:06:80:16:d2:9b: e1:10:cc:c6:a7:90:08:b6:d5:43:34:32:77:b1:cc: 1e:c9:70:ab:ce:ff:c2:f7:2f:c2:43:97:42:5e:65: b9:85:dd:84:56:80:c2:35:b6:0a:57:c9:32:8f:8e: 6e:32:0e:6e:4b:f2:42:b8:a9:1d:68:87:68:5e:0c: 68:2d:58:c8:d8:b1:a6:36:6a:93:ee:6c:72:d6:94: 58:85:f4:27:43:dd:46:ad:7b:d8:74:34:bd:34:9c: 9c:0b:fe:2c:cd:35:c9:0d:d1:72:9a:7f:59:36:6b: 5a:ac:cd:c8:06:23:23:71:eb:f8:f8:50:44:91:22: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:95:4B:D0:6A:1D:AA:00:49:6B:C5:F1:91:6D:56:16:D3:66:21 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:91:d3:2b:13:26:93:d3:06:57:fe:c6:f1:31:94:19:6b:6d: f2:46:04:1b:49:e9:bd:dc:aa:b7:3e:0c:fc:5e:a9:14:41:65: 7e:05:37:74:3c:05:09:2c:04:4a:8f:16:32:3f:1e:1e:27:08: b0:af:9c:c7:53:42:9e:39:24:df:fb:ae:67:dd:8b:c1:9b:a4: 61:67:77:26:3d:99:29:f2:b1:4c:dd:57:b2:54:8a:ef:83:7f: 61:c0:75:1f:0b:a7:03:c4:3b:4d:1c:cf:07:62:59:aa:c0:88: e6:60:51:81:98:f9:ae:b3:78:42:e2:e2:ad:60:28:4f:d3:5a: 4d:9d:c5:c3:a4:ea:26:fe:2e:2c:ce:cb:ce:18:29:93:e2:5b: 1e:38:ec:03:3d:99:b9:c8:e0:94:cd:97:a6:09:66:02:ef:3f: 29:92:1d:5d:9e:26:43:1d:51:82:db:40:13:33:85:bb:b7:48: fe:42:f7:5e:6b:53:f2:7f:70:07:5c:6c:b8:e5:de:cf:55:95: d6:c1:a8:1c:22:7e:f3:b3:e5:1c:78:fa:ea:d1:07:75:d9:10: 61:d2:51:4b:12:84:b6:7c:cf:3c:17:15:f0:da:1a:87:5c:c8: 28:dd:96:02:07:aa:05:d0:28:11:69:2f:d6:e3:fe:89:24:77: 65:10:5f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUxMDE5MDMyOTIxWhcNMjUxMDI2MDMyOTIxWjAYMRYwFAYD VQQDEw02OGY0NWIxMS1mYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvzr4BI2apEnnsXSznLMp3+QgfdWB4L2KqppL9OWRVtpPZeNLur7XPuibfFk cfxbYWCewlOKrNl4S08TciGMQaHPaB5My6k0QSAfyJOObw/xlQwoC1KVlP+EkER0 2r9rjLWrc6x/Z6vC3ztqS6NmPmJZKjkPns/He9hyt1GYOqPJBoAW0pvhEMzGp5AI ttVDNDJ3scweyXCrzv/C9y/CQ5dCXmW5hd2EVoDCNbYKV8kyj45uMg5uS/JCuKkd aIdoXgxoLVjI2LGmNmqT7mxy1pRYhfQnQ91GrXvYdDS9NJycC/4szTXJDdFymn9Z NmtarM3IBiMjcev4+FBEkSKh/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzIlUvQ ah2qAElrxfGRbVYW02YhMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNkdMrEyaT0wZX/sbxMZQZa23yRgQbSem93Kq3Pgz8XqkUQWV+BTd0 PAUJLARKjxYyPx4eJwiwr5zHU0KeOSTf+65n3YvBm6RhZ3cmPZkp8rFM3VeyVIrv g39hwHUfC6cDxDtNHM8HYlmqwIjmYFGBmPmus3hC4uKtYChP01pNncXDpOom/i4s zsvOGCmT4lseOOwDPZm5yOCUzZemCWYC7z8pkh1dniZDHVGC20ATM4W7t0j+Qvde a1Pyf3AHXGy45d7PVZXWwagcIn7zs+UcePrq0Qd12RBh0lFLEoS2fM88FxXw2hqH XMgo3ZYCB6oF0CgRaS/W4/6JJHdlEF+f -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:23 2025 by rpki-client